WASHINGTON—The National Retail Federation is continuing its full-court media press around EMV, this time releasing a statement noting it agrees with a warning from the FBI that the new chip-based credit cards are safer than traditional cards but still vulnerable to fraud and need to be used with a PIN instead of a signature to minimize risk.
"What the FBI is saying is what the rest of the world already sees as common sense," NRF Senior Vice President and General Counsel Mallory Duncan said in a released statement. "It's the right thing to do, and we hope the banks are listening."
"Retailers are determined to protect their customers," Duncan said. "That's why we are pushing the banks to use all of the security the new cards are capable of providing, not just half. They shouldn't lock the front door but leave the back door wide open."
The statement is just the latest from the NRF since the Oct. 1 liability shift deadline related to card fraud.
In a recent warning issued to consumers, merchants and law enforcement, the FBI praised EMV as being more secure than traditional magnetic stripe cards, but said they are "still vulnerable to fraud." Despite card industry claims that the chips are difficult to counterfeit, the FBI said the cards "can be counterfeited using stolen card data obtained from the black market."
The bureau also said the chip "will not likely" stop stolen or counterfeit cards from being used online or in telephone purchases.
"When using the EMV card at a point-of-sale terminal, consumers should use the PIN instead of a signature," the FBI said. "This fully utilizes the security features built within the EMV card."
The FBI encouraged merchants to require that consumers use a PIN rather than signature, and said merchants should ask for a government-issued photo identification card when customers use a signature.
Despite the FBI warning, virtually all of the chip cards being issued in the United States are chip-and-signature rather than chip-and-PIN, leaving consumers without the option to use a PIN, the NRF stated. By contrast, EMV cards used in 80 countries around the world for 20 years or more are routinely chip-and-PIN.
"They're encouraging consumers to use PIN and they're encouraging merchants to request PIN – the only thing missing is to encourage the banks to issue PIN cards," Duncan said.
The FBI warning follows the Oct. 1 EMV liability shift deadline. The warning is the second time that the federal government has come down in favor of PIN – President Obama last year signed an executive order requiring that credit cards issued to federal government workers have a PIN, and that federal facilities that accept credit cards be equipped for PIN.